DORA Consultant - Luxembourg - Permanent

ACH, a recruitment and consulting firm based in Luxembourg, is looking for a DORA consultant to support its clients in the Luxembourg financial sector (banks, insurers, management companies, payment service providers) in complying with the EU Digital Operational Resilience Act. The position is based in Luxembourg, offered as a permanent contract and also open to freelancers.

Your responsibilities

• Carry out gap analyses against DORA requirements and build the compliance roadmap.

• Structure and develop the information and communication technology (ICT) risk management framework.

• Set up the process for managing, classifying and reporting major ICT-related incidents.

• Define and follow up on the digital operational resilience testing programme.

• Drive ICT third-party risk management: register of information, contract review, exit strategy.

• Write policies and procedures, and prepare reporting to management and the regulator.

• Raise awareness among IT, risk and business teams.